reFlutter

Dieses Framework unterstützt das Reverse Engineering von Flutter‑Apps, indem es eine gepatchte Version der Flutter‑Bibliothek verwendet, die bereits kompiliert und für das Repackaging der App bereit ist. Die Bibliothek enthält eine modifizierte Snapshot‑Deserialisierung, die eine dynamische Analy...

peetch

peetch peetch è una raccolta di strumenti pensati per sperimentare con diversi aspetti di eBPF al fine di bypassare le protezioni del protocollo TLS. Attualmente, peetch include tre sottocomandi. Il primo chiamato dump ha lo scopo di sniffare il traffico di rete associando informazioni sul proces...

PacketPirate

PacketPirate Un proxy MITM headless, scriptabile, basato su riga di comando, progettato per l'intercettazione, l'analisi e la modifica del traffico di rete su sistemi Windows. Funziona in modo simile ai proxy GUI standard del settore, ma è ottimizzato per ambienti di automazione, operazione...

rosemary

Rosemary क्विक QUIC पर क्रॉस-प्लेटफ़ॉर्म कर्नेल-स्तरीय पिवटिंग प्लेटफ़ॉर्म। कोई TUN/TAP नहीं। कोई proxychains नहीं। कोई प्रॉक्सी सेटिंग्स नहीं। Rosemary दूरस्थ होस्टों पर ट्रैफ़िक को कर्नेल स्तर पर पारदर्शी रूप से इंटरसेप्ट करता है: कोई प्रॉक्सी सेटिंग्स नहीं, कोई TUN/TAP डिवाइस नहीं, कोई...

macstealer

MacStealer: Bypass dell'isolamento client Wi-Fi 1. Introduzione Questo repository contiene MacStealer. Può testare le reti Wi-Fi per bypass dell'isolamento client CVE-2022-47522. Il nostro attacco può intercettare rubare il traffico verso altri client a livello MAC, anche se ai client è impedito...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...

flare-fakenet-ng

root@kitploit: | /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 è uno strumento di analisi di rete dinamico di nuova generazione...

reFlutter

Leggi di più sul blog: https://swarm.ptsecurity.com/fork-bomb-for-flutter/ Questo framework aiuta nel reverse engineering di app Flutter utilizzando una versione patchata della libreria Flutter, già compilata e pronta per il repacking dell'app. Questa libreria ha il processo di deserializzazione...

CVE-2020-8554

CVE-2020-8554 mit Policy Controller entschärfen Dieses Repository enthält Konfigurationsdateien zur Nutzung von Policy Controller, der auf dem Open-Source-Projekt OPA Gatekeeper basiert, um Kubernetes-Dienste vor dem Zugriff über öffentliche IPs zu schützen. Die Sicherheitswarnung zu diesem Probl...

web-mitm-lab

WebMITM Lab - Framework de Pesquisa de Segurança Python 3.x | Licença Educacional | Ver Licença ⚠️ Apenas para Fins Educacionais e Pesquisa de Segurança Autorizada 📌 Descrição WebMITM Lab é um framework educacional projetado para demonstrar conceitos de ataques Man-in-the-Middle MITM em treinament...

BurpSuite-For-Pentester

🕷️ BurpSuite para Pentester Um guia prático de consulta rápida cheat sheet e aprendizado sobre o Burp Suite, projetado para caçadores de bug bounty e testadores de penetração descobrirem com eficiência vulnerabilidades em aplicações web, de baixa severidade P4 a crítica P1, usando o Burp Suite...

CVE-2026-19683

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

CVE-2026-73253

Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...

DEBIAN-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-50578 ePA 3.x Integration: TLS Certificate Verification Universally Disabled

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-65329

CVE-2026-65329 affects the Telephony framework on iOS 26.6.1/iPadOS 26.6.1 (iPhone 11+), where an authentication issue in IPSec state management allowed a privileged-network-position attacker to bypass IPSec authentication and intercept network traffic; fixed via improved state management. No exp...

CVE-2026-0292

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...

CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...